Description

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the /rest/gadget/1.0/createdVsResolved/generate endpoint. The affected versions are before version 8.16.0.

Remediation

References

CVE-2021-39123

Related Vulnerabilities

WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads PHP Code Injection (1.3)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43720)

WordPress Plugin Timetable and Event Schedule by MotoPress Unspecified Vulnerability (2.4.3)

phpMyAdmin Improper Authentication Vulnerability (CVE-2018-12613)

WordPress Plugin Simple Banner Cross-Site Scripting (2.10.3)

Severity

High

Classification

CVE-2021-39123

Tags

Missing Update Known Vulnerabilities